8e2605d11a32adfd117e37451a9b913439c5dbffc0a6500449c60e0cc79121c8

Analysis

max time kernel
148s
max time network
113s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
15/07/2026, 12:18

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
8e2605d11a32adfd117e37451a9b913439c5dbffc0a6500449c60e0cc79121c8.exe
Size 338KB
Sample260715-pgx29afv41
SHA256 8e2605d11a32adfd117e37451a9b913439c5dbffc0a6500449c60e0cc79121c8
MD5 5ef5599a874e62c653b62a3af036af1a
SHA1 7e54ffb8f482137cb6c7ebd7be4b0c21794ffe41
SHA512 3b28f97484eafcddd81136f0b9d0fcb45a2ad3f07e21d704fe958df421e54a11f1ff4ad7716a36e9f518c63cbe62b723694569fddf897803981ba4be59be47bf
SSDEEP 6144:6FQfvaGs2aFjY0hAPCvb1TFKVzUhL/uek/N2AJbmpV:6WfiV2ahAPmJTn6kXv
TLSH
T1BF74CF31BBC2E073D91604B59A76A755CA3DAC201F6199D7A3C03E9ADD306C1DB39B0B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	8e2605d11a32adfd117e37451a9b913439c5dbffc0a6500449c60e0cc79121c8.exe

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
4332	8e2605d11a32adfd117e37451a9b913439c5dbffc0a6500449c60e0cc79121c8.exe
4332	8e2605d11a32adfd117e37451a9b913439c5dbffc0a6500449c60e0cc79121c8.exe

C:\Users\Admin\AppData\Local\Temp\8e2605d11a32adfd117e37451a9b913439c5dbffc0a6500449c60e0cc79121c8.exe
"C:\Users\Admin\AppData\Local\Temp\8e2605d11a32adfd117e37451a9b913439c5dbffc0a6500449c60e0cc79121c8.exe"
1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
PID:4332

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads